SB20251226244 - Improper locking in Linux kernel ipv6
Published: December 26, 2025 Updated: December 31, 2025
Security Bulletin ID
SB20251226244
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2022-50764)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the ipip6_rcv(), ipip6_tunnel_xmit(), sit_tunnel_xmit__() and sit_tunnel_xmit() functions in net/ipv6/sit.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/207501a986831174df09a36a8cb62a28f92f0dc8
- https://git.kernel.org/stable/c/222cc04356984f3f98acfa756a69d4bed7c501ac
- https://git.kernel.org/stable/c/4eed93bb3e57b8cc78d17166a14e40a73276015a
- https://git.kernel.org/stable/c/cb34b7cf17ecf33499c9298943f85af247abc1e9
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.86
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.16
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2